0xray 4.0.41 → 4.0.42

package/.grok-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "0xray",
-  "version": "4.0.41",
+  "version": "4.0.42",
   "description": "0xRay suit for Grok, Hermes, OpenClaw, OpenCode: mill+inspect, Codex, 7 MCP servers. Costume 45/42 is opt-in foundry, not the default wear.",
   "author": {
     "name": "0xRay AI",

package/.opencode/skills/orchestrator/SKILL.md

@@ -72,6 +72,18 @@ The hold lasts for the work that named the plane. A sentence that does not say l
 
 Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
+## Confer
+
+The TUI that is wearing the suit already spawned the MCP servers. Confer uses those servers. It does not start a private server and it does not run `hermes -z`.
+
+When `.xray/state/confer-ask-s.1.json`, `confer-ask-s.2.json`, and `confer-ask-s.3.json` are on disk:
+
+1. Call the server and tool named in each ask. Researcher and code-review return evidence. Architect returns the assessment with `Verdict: UNREVIEWED`.
+2. Write one verdict line from this TUI's model: `Verdict: PASS`, `Verdict: CONDITIONAL`, or `Verdict: FAIL`, plus top risks and a hardening note.
+3. Call `record_confer_receipt` on `xray-governance` with `todoId`, `subagent`, `sessionId`, and that text.
+
+Only `Verdict: PASS` completes the todo. FAIL, CONDITIONAL, and UNREVIEWED stay open. A session id that does not match the plan does not complete the todo. Grok, OpenCode, Hermes, and OpenClaw use these same three steps. Hermes is a voter only when Hermes is the TUI, and then only as that TUI's own model.
+
 ## Lead cadence (syncopation)
 
 The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`).

package/.xray/features.json

@@ -1,6 +1,6 @@
 {
   "$schema": "./features.schema.json",
-  "version": "4.0.41",
+  "version": "4.0.42",
   "description": "0xRay Framework - Unified Feature Configuration",
   "suit_temperament": {
     "profile": "auto",

package/.xray/features.schema.json

@@ -45,7 +45,7 @@
         },
         "confer_on_synthesis": {
           "type": "boolean",
-          "description": "Auto-run 3-agent confer quorum at synthesis checkpoint (default true)"
+          "description": "Opt in to the 3-agent confer quorum. A missing key stays off."
         },
         "confer": {
           "type": "object",

package/AGENTS-consumer.md

@@ -6,6 +6,8 @@ Quick reference for the 0xRay AI orchestration framework worn on **{{CONSUMER_NA
 
 **4.0** — a suit that survives the context window
 
+Confer votes. Burst runs the swarm.
+
 Same **three-subsystem OS** as v2 (Inference · External Governance · Autonomous Engine). Constitution always on. Temperament scales ceremony. Four chat bridges plus Cursor project hooks. **Repertoire is preferred** — vendored 0.2.9 ships **on**. Dest is named laws, not keywords. Station is the compact ticket, not a substitute. Explicit opt-out only: `"enabled": false, "provider": "repertoire"`. Trim fat, do not gut the design.
 
 **Governance always on** (Codex PreToolUse, no new surface, no `eval`). **Engine ceremony** (analyze-complexity before spawn, confer) is **guided** by default so free-model OpenCode/Hermes stay in check. Frontier hosts (Grok 4.6 class) with `suit_temperament.profile: auto` **warn** on spawn-without-plan instead of deny — the engine is still there. Existing `.xray/features.json` without `suit_temperament` stays **guided**. Docs: v3 from v2 · Suit temperament.

package/AGENTS.md

@@ -4,6 +4,8 @@ Quick reference for the xray AI orchestration framework (**4.0**).
 
 **4.0** — a suit that survives the context window.
 
+Confer votes. Burst runs the swarm.
+
 **Exo, not catalog.** Three-subsystem OS (Inference · External Governance · Autonomous Engine) · constitution always on · temperament by host · 4 floors · **Repertoire preferred** (vendored 0.2.9, dest = laws).
 
 **Temperament:** ceremony (analyze-complexity before spawn, confer) is **guided** by default so free-model OpenCode/Hermes stay in check. Frontier hosts (Grok 4.6 class) with `suit_temperament.profile: auto` **warn** on spawn-without-plan; Codex 11/29/69 still **deny**. Missing `suit_temperament` stays guided. See `docs-site/docs/architecture/v3-from-v2.md`.

package/README.md

@@ -2,7 +2,9 @@
 
 **4.0** — a suit that survives the context window
 
-![0xRay v4 exo — CONSTITUTION ON](docs-site/static/img/exo-skeleton-v4.jpg)
+![0xRay 4.0.42 — Confer votes. Burst runs the swarm.](docs-site/static/img/exo-skeleton-v4.jpg)
+
+Confer votes. Burst runs the swarm.
 
 Not a catalog of agents. The product is the **skeleton you wear**.
 
@@ -18,20 +20,22 @@ Not a catalog of agents. The product is the **skeleton you wear**.
 
 ```bash
 npm install 0xray
+npx 0xray wear
 ```
 
-Consumer `npm install 0xray` auto-wires four chat bridges, Cursor project hooks, and seven MCP servers. **Repertoire is preferred** — vendored **0.2.9** ships on: factory + stack laws, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Dest is a judgment index. Explicit opt-out only: `"enabled": false, "provider": "repertoire"`. Do not pin 0.1.8.
+`npm install 0xray` links vendored `@0xray/repertoire` and prints `npx 0xray wear`. It does not write `.mcp.json` or the chat bridges. Wear writes the consumer suit: managed `AGENTS.md`, `.xray` config, seven MCP servers, and the OpenCode, Grok, Hermes, and OpenClaw bridges (`install-bridges.cjs`). Inside a git checkout, wear also fastens Cursor project hooks. **Repertoire is preferred** — vendored **0.2.9** ships on: factory + stack laws, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Dest is a judgment index. Explicit opt-out only: `"enabled": false, "provider": "repertoire"`. Do not pin 0.1.8.
 
 ## Quick Start
 
 ```bash
-npm install 0xray # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
-npx 0xray status # verify install
-npx 0xray setup # optional: symlinks, hook extras
+npm install 0xray
+npx 0xray wear
+npx 0xray status
+npx 0xray setup --git-hooks # optional: git hooks only
 npx @0xray/foundry inspect --skip-live # mill receipt (chat is not a receipt)
 ```
 
-Manual per-platform install (idempotent, same result as postinstall):
+Manual per-platform install (idempotent, same bridges wear writes):
 
 ```bash
 npx 0xray opencode install
@@ -51,12 +55,48 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
-| **Unreleased** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
+| **4.0.42** | Confer votes. Burst runs the swarm. |
+| **4.0.41** | Wake cascade stays on the station module. A fresh wear fastens mill and inspect. Goggles records the worn package path. The live page plays the mesh in the browser. |
+| **4.0.40** | Live mesh runs the full loop: feed watch, render, direction, deploy, health, and the ledger both ways. |
+| **4.0.39** | The seven stack laws stay worn. Repertoire in the suit is 0.2.9. |
+| **4.0.38** | Codex term 70 requires the current source and the worn npm package. Dynamo's recommendation is honored. |
+| **4.0.37** | A naked checkout wakes with repertoire on. |
+| **4.0.36** | Goggles holds the stop through search, read, and a dist wipe. |
+| **4.0.35** | Wear rewrites a checkout `dist/cli` launch to `node_modules/0xray`. |
+| **4.0.34** | The lens stays on the worn build when the source is not packed. |
+| **4.0.33** | Version bump. |
+| **4.0.32** | `0xray look` opens one plane. Digest and triage return the card. Calling and confer stay off. |
+| **4.0.31** | Goggles looks at one pipeline. Kind 0 stays quiet when the worn list matches the map. Calling and confer stay off. |
 | **4.0.30** | Fixes 4.0.29: `npx 0xray wear` and `setup` work outside a git checkout again. They write the 4.0.28 project setup, skip only Cursor hooks, and print one warning. Inside a git checkout they restore the 4.0.28 project setup, and `wear` adds Cursor hooks plus the unwear snapshot. Companion `@0xray/grok-bot` 0.1.8. Released 2026-09-28. |
 | **4.0.29** | `npm install` only creates the relative `node_modules/@0xray/repertoire` link to the vendored repertoire and prints `npx 0xray wear`. Run `npx 0xray wear` after install. Wear writes only the consumer project's `.cursor/hooks.json` (installed dist hooks, beside user entries); `npx 0xray unwear` restores the snapshot. Companion `@0xray/grok-bot` 0.1.8. Released 2026-09-28. |
 | **4.0.28** | MCP servers start through `scripts/node/mcp-launch.cjs` and only see PATH, HOME, XRAY_ROOT, plus names on their keep list. Tokens such as NPM_TOKEN are not inherited. User env values stay out of argv. Postinstall keeps user edits to AGENTS.md, .mcp.json, and opencode.json. `house init` does not copy EXAMPLE.md; doctor FAILs while `house/EXAMPLE.md` exists. Inspect adds a machinePlugin check. The Cursor hook defaults XRAY_ROOT to the suit. Companion `@0xray/grok-bot` 0.1.7. Released 2026-09-27. |
 | **4.0.27** | Host compact proof needs a generation id and a numeric usage percent, and the same preCompact receipt is mirrored to nested consumer wear roots. Memory scoring: [docs/memory-scoring.md](docs/memory-scoring.md) (orchestrator links it). Companion `@0xray/grok-bot` 0.1.6: general page vs `house/` overlay, `templates/house/`, `grok-bot house init`, doctor `GROK_BOT_HOUSE` or walk-up. Released 2026-09-26. |
+| **4.0.26** | A lesson is stored when the task matches no signal. A Cursor compact cut is proved with a session log and a per-session receipt. |
+| **4.0.25** | Plate schematics ship in the package. A worn suit resolves them from `dist/integrations/hooks/plates.cjs`. |
+| **4.0.24** | Compaction and a host change are the same cut. The station card is the handoff. Repertoire in that suit is 0.2.8. |
+| **4.0.23** | The Dynamo client starts when external governance is required. Proposals score locally when that governance is off. |
+| **4.0.22** | The stamper strips present-tense patch pins from shipped prose. The cursor gate follows the suit mill. |
+| **4.0.21** | Dest is named laws, not hangar slugs. Cleanup heat grows the project copy when Repertoire is on. |
+| **4.0.20** | Heat grows the project copy. Session boot rewrites when HEAD moves. |
+| **4.0.19** | Vendored Repertoire 0.2.5. Wear replaces older leftovers. |
+| **4.0.18** | Wake heat joins bookmark, index, and mind. |
+| **4.0.17** | Cursor heat writes session files when HEAD moves. |
+| **4.0.16** | `npx 0xray validate` is a wear check. |
+| **4.0.15** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
+| **4.0.14** | Factory-blip beds stamp the hook cell and keep six tellable bodies. |
+| **4.0.13** | Station PreCompact merge keeps custom STATION.md keys. |
+| **4.0.12** | Project-scoped Grok plugin dest so multi-seat wear does not clobber the machine plugin. |
+| **4.0.11** | The npm pack includes `.grok-plugin/` so the Grok marketplace manifest ships. |
+| **4.0.10** | Version bump. |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
+| **4.0.8** | Confer abstains locally instead of rubber-stamping a proposal. |
+| **4.0.7** | Nested mill 0.1.9. Inventory writes `dna`. The mill does not mint on chain. |
+| **4.0.6** | Nested mill 0.1.8. Isolated HOME skips machine Hermes and OpenClaw. |
+| **4.0.5** | Inspect is a mill command. A costume dump fails mint. Mill plant stays mill + inspect. |
+| **4.0.4** | Mill fastens an inspect suit. Costume is opt-in with `foundry.json` `"costume": true`. |
+| **4.0.3** | Their plant is the suit. The mill plant is the factory discipline on the hanger. |
+| **4.0.2** | The nested mill ships in the 0xray tarball. `@0xray/foundry` stays the standalone mill CLI. |
+| **4.0.1** | CLI `--version` no longer dumps a Commander stack. The release gate smokes the organ and does not run another publish from a lifecycle script. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
@@ -102,9 +142,9 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 - **External Governance** — Dynamo Solar SSOT; CodexPolicyService; weighted PHI/TAU deliberation.
 - **Autonomous Engine** — thinDispatch 7-flow routing; orchestrator confidence gate (v3.3.1).
 
-## Consumer Install (postinstall)
+## Consumer Install (wear)
 
-On `npm install 0xray` in a consumer project, postinstall automatically:
+`npm install 0xray` links the vendored repertoire and prints `npx 0xray wear`. Wear then:
 
 1. Copies **`AGENTS-consumer.md` → `AGENTS.md`**. Does **not** write consumer-root **`SKILLS.md`**.
 2. Fastens **mill plant** (`mill` + `inspect`). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not an xray catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump.
@@ -113,7 +153,7 @@ On `npm install 0xray` in a consumer project, postinstall automatically:
 5. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
 6. Installs **4 chat bridges**: OpenCode, Grok, Hermes, OpenClaw, plus **Cursor** `.cursor/hooks.json` (PPE + wiring; mill plant, not costume)
 7. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) may coexist when worn. Extra shops: `foundry.json` `shopPlant`. Not costume.
-8. Installs git pre-commit hook (non-blocking if not a git repo)
+8. Inside a git checkout, fastens Cursor `.cursor/hooks.json` and the hook scripts, and keeps an unwear snapshot. Outside a git checkout, skips those hooks and prints one warning. `npx 0xray setup --git-hooks` is what installs git hooks.
 
 See [llms.txt](llms.txt) for the agent map. Catalog of 45 skills lives in [SKILLS.md](SKILLS.md) — that is the exo catalog, not default consumer wear.
 
@@ -186,13 +226,13 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Integrations
 
-| Platform | Install | Postinstall behavior |
+| Platform | Install | What that command writes |
 |----------|---------|----------------------|
 | **OpenCode** | `npx 0xray opencode install` | Merges `opencode.json`, copies agent YML surfaces |
 | **Grok CLI / Build** | `npx 0xray grok install` | Project `.grok/plugins/0xray` (shared HOME does not clobber machine plugin), 7 MCPs servers |
 | **Hermes Agent** | `npx 0xray hermes install` | `~/.hermes/plugins/xray-hermes`, consumer root marker |
 | **OpenClaw** | `npx 0xray openclaw install` | `.xray/config/openclaw.json`, skill sync |
-| **Cursor** | postinstall (`installCursorBridge`) | Fastens `.cursor/hooks.json` + relative `.cursor/hooks/*.sh`. Rewrites leftover env-assignment one-liners. Not a fifth chat TUI. |
+| **Cursor** | `npx 0xray wear` inside a git checkout | Fastens `.cursor/hooks.json` + relative `.cursor/hooks/*.sh`. Rewrites leftover env-assignment one-liners. Not a fifth chat TUI. |
 
 ## Governance & Codex
 

package/SKILLS.md

@@ -2,6 +2,8 @@
 
 **4.0** — a suit that survives the context window
 
+Confer votes. Burst runs the swarm.
+
 **45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not this catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+. Agent map: [llms.txt](llms.txt).
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. **Repertoire is preferred** for long-term judgment (vendored 0.2.9, dest = named laws). Station is the compact ticket, not a skill and not a keyword store. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.

package/dist/AGENTS.md

@@ -4,6 +4,8 @@ Quick reference for the xray AI orchestration framework (**4.0**).
 
 **4.0** — a suit that survives the context window.
 
+Confer votes. Burst runs the swarm.
+
 **Exo, not catalog.** Three-subsystem OS (Inference · External Governance · Autonomous Engine) · constitution always on · temperament by host · 4 floors · **Repertoire preferred** (vendored 0.2.9, dest = laws).
 
 **Temperament:** ceremony (analyze-complexity before spawn, confer) is **guided** by default so free-model OpenCode/Hermes stay in check. Frontier hosts (Grok 4.6 class) with `suit_temperament.profile: auto` **warn** on spawn-without-plan; Codex 11/29/69 still **deny**. Missing `suit_temperament` stays guided. See `docs-site/docs/architecture/v3-from-v2.md`.

package/dist/CHANGELOG.md

@@ -42,6 +42,19 @@ The format is based on [Conventional Commits](https://www.conventionalcommits.or
 - Archive root `integrations/` costume SKILL dump → `docs/archive/integrations-costume/`. Live wear is `src/integrations`.
 - Archive root `commands/` stale copy → `docs/archive/commands-copy/`. Live wear is `src/opencode/commands`.
 
+## [4.0.42] - 2026-10-09
+
+### 🔄 Changes
+
+Confer votes. Burst runs the swarm.
+
+- Confer asks the MCP servers the wearing chat already spawned. Only a real PASS completes the consult. A PASS that belongs to another session is asked again.
+- Wear pins Grok at the installed CLI. Hermes codex-check catches a console call. OpenClaw stays on the installed plugin. Cursor hooks stay on a git checkout.
+- Burst runs the swarm live. The board keeps an honest LIVE pill and one seat state. The box posts one delta while `push.sh` holds the lock, retries once on 409, and keeps the ingest secret in the header.
+- A SENT prompt holds that seat working for 10 minutes. A posted seat must match the installation token. Legacy prompt lines are read, and the prompts file defaults to `fleet/prompts.jsonl`.
+
+---
+
 ## [4.0.41] - 2026-10-07
 
 ### 🔄 Changes

package/dist/README.md

@@ -2,7 +2,9 @@
 
 **4.0** — a suit that survives the context window
 
-![0xRay v4 exo — CONSTITUTION ON](docs-site/static/img/exo-skeleton-v4.jpg)
+![0xRay 4.0.42 — Confer votes. Burst runs the swarm.](docs-site/static/img/exo-skeleton-v4.jpg)
+
+Confer votes. Burst runs the swarm.
 
 Not a catalog of agents. The product is the **skeleton you wear**.
 
@@ -18,20 +20,22 @@ Not a catalog of agents. The product is the **skeleton you wear**.
 
 ```bash
 npm install 0xray
+npx 0xray wear
 ```
 
-Consumer `npm install 0xray` auto-wires four chat bridges, Cursor project hooks, and seven MCP servers. **Repertoire is preferred** — vendored **0.2.9** ships on: factory + stack laws, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Dest is a judgment index. Explicit opt-out only: `"enabled": false, "provider": "repertoire"`. Do not pin 0.1.8.
+`npm install 0xray` links vendored `@0xray/repertoire` and prints `npx 0xray wear`. It does not write `.mcp.json` or the chat bridges. Wear writes the consumer suit: managed `AGENTS.md`, `.xray` config, seven MCP servers, and the OpenCode, Grok, Hermes, and OpenClaw bridges (`install-bridges.cjs`). Inside a git checkout, wear also fastens Cursor project hooks. **Repertoire is preferred** — vendored **0.2.9** ships on: factory + stack laws, in-process routing, extra host MCP `repertoire`. Not an eighth `xray-*` server. Dest is a judgment index. Explicit opt-out only: `"enabled": false, "provider": "repertoire"`. Do not pin 0.1.8.
 
 ## Quick Start
 
 ```bash
-npm install 0xray # postinstall: mill+inspect plant + 4 bridges + 7 MCPs + AGENTS.md + .mcp.json
-npx 0xray status # verify install
-npx 0xray setup # optional: symlinks, hook extras
+npm install 0xray
+npx 0xray wear
+npx 0xray status
+npx 0xray setup --git-hooks # optional: git hooks only
 npx @0xray/foundry inspect --skip-live # mill receipt (chat is not a receipt)
 ```
 
-Manual per-platform install (idempotent, same result as postinstall):
+Manual per-platform install (idempotent, same bridges wear writes):
 
 ```bash
 npx 0xray opencode install
@@ -51,12 +55,48 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 
 | Version | Highlights |
 |---------|------------|
-| **Unreleased** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
+| **4.0.42** | Confer votes. Burst runs the swarm. |
+| **4.0.41** | Wake cascade stays on the station module. A fresh wear fastens mill and inspect. Goggles records the worn package path. The live page plays the mesh in the browser. |
+| **4.0.40** | Live mesh runs the full loop: feed watch, render, direction, deploy, health, and the ledger both ways. |
+| **4.0.39** | The seven stack laws stay worn. Repertoire in the suit is 0.2.9. |
+| **4.0.38** | Codex term 70 requires the current source and the worn npm package. Dynamo's recommendation is honored. |
+| **4.0.37** | A naked checkout wakes with repertoire on. |
+| **4.0.36** | Goggles holds the stop through search, read, and a dist wipe. |
+| **4.0.35** | Wear rewrites a checkout `dist/cli` launch to `node_modules/0xray`. |
+| **4.0.34** | The lens stays on the worn build when the source is not packed. |
+| **4.0.33** | Version bump. |
+| **4.0.32** | `0xray look` opens one plane. Digest and triage return the card. Calling and confer stay off. |
+| **4.0.31** | Goggles looks at one pipeline. Kind 0 stays quiet when the worn list matches the map. Calling and confer stay off. |
 | **4.0.30** | Fixes 4.0.29: `npx 0xray wear` and `setup` work outside a git checkout again. They write the 4.0.28 project setup, skip only Cursor hooks, and print one warning. Inside a git checkout they restore the 4.0.28 project setup, and `wear` adds Cursor hooks plus the unwear snapshot. Companion `@0xray/grok-bot` 0.1.8. Released 2026-09-28. |
 | **4.0.29** | `npm install` only creates the relative `node_modules/@0xray/repertoire` link to the vendored repertoire and prints `npx 0xray wear`. Run `npx 0xray wear` after install. Wear writes only the consumer project's `.cursor/hooks.json` (installed dist hooks, beside user entries); `npx 0xray unwear` restores the snapshot. Companion `@0xray/grok-bot` 0.1.8. Released 2026-09-28. |
 | **4.0.28** | MCP servers start through `scripts/node/mcp-launch.cjs` and only see PATH, HOME, XRAY_ROOT, plus names on their keep list. Tokens such as NPM_TOKEN are not inherited. User env values stay out of argv. Postinstall keeps user edits to AGENTS.md, .mcp.json, and opencode.json. `house init` does not copy EXAMPLE.md; doctor FAILs while `house/EXAMPLE.md` exists. Inspect adds a machinePlugin check. The Cursor hook defaults XRAY_ROOT to the suit. Companion `@0xray/grok-bot` 0.1.7. Released 2026-09-27. |
 | **4.0.27** | Host compact proof needs a generation id and a numeric usage percent, and the same preCompact receipt is mirrored to nested consumer wear roots. Memory scoring: [docs/memory-scoring.md](docs/memory-scoring.md) (orchestrator links it). Companion `@0xray/grok-bot` 0.1.6: general page vs `house/` overlay, `templates/house/`, `grok-bot house init`, doctor `GROK_BOT_HOUSE` or walk-up. Released 2026-09-26. |
+| **4.0.26** | A lesson is stored when the task matches no signal. A Cursor compact cut is proved with a session log and a per-session receipt. |
+| **4.0.25** | Plate schematics ship in the package. A worn suit resolves them from `dist/integrations/hooks/plates.cjs`. |
+| **4.0.24** | Compaction and a host change are the same cut. The station card is the handoff. Repertoire in that suit is 0.2.8. |
+| **4.0.23** | The Dynamo client starts when external governance is required. Proposals score locally when that governance is off. |
+| **4.0.22** | The stamper strips present-tense patch pins from shipped prose. The cursor gate follows the suit mill. |
+| **4.0.21** | Dest is named laws, not hangar slugs. Cleanup heat grows the project copy when Repertoire is on. |
+| **4.0.20** | Heat grows the project copy. Session boot rewrites when HEAD moves. |
+| **4.0.19** | Vendored Repertoire 0.2.5. Wear replaces older leftovers. |
+| **4.0.18** | Wake heat joins bookmark, index, and mind. |
+| **4.0.17** | Cursor heat writes session files when HEAD moves. |
+| **4.0.16** | `npx 0xray validate` is a wear check. |
+| **4.0.15** | Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill declares (looker / vibe / mixer live in the mill). Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip\|sound` remain (0.1.11+). Shop plant first-class (`shop-extract`, `shop-witness`, `shop-pin` + `foundry.json` `shopPlant`). |
+| **4.0.14** | Factory-blip beds stamp the hook cell and keep six tellable bodies. |
+| **4.0.13** | Station PreCompact merge keeps custom STATION.md keys. |
+| **4.0.12** | Project-scoped Grok plugin dest so multi-seat wear does not clobber the machine plugin. |
+| **4.0.11** | The npm pack includes `.grok-plugin/` so the Grok marketplace manifest ships. |
+| **4.0.10** | Version bump. |
 | **4.0.9** | Mill target: postinstall does not mill npm global prefix or `_npx` as a consumer. Isolated HOME skips machine `~/.grok`. |
+| **4.0.8** | Confer abstains locally instead of rubber-stamping a proposal. |
+| **4.0.7** | Nested mill 0.1.9. Inventory writes `dna`. The mill does not mint on chain. |
+| **4.0.6** | Nested mill 0.1.8. Isolated HOME skips machine Hermes and OpenClaw. |
+| **4.0.5** | Inspect is a mill command. A costume dump fails mint. Mill plant stays mill + inspect. |
+| **4.0.4** | Mill fastens an inspect suit. Costume is opt-in with `foundry.json` `"costume": true`. |
+| **4.0.3** | Their plant is the suit. The mill plant is the factory discipline on the hanger. |
+| **4.0.2** | The nested mill ships in the 0xray tarball. `@0xray/foundry` stays the standalone mill CLI. |
+| **4.0.1** | CLI `--version` no longer dumps a Commander stack. The release gate smokes the organ and does not run another publish from a lifecycle script. |
 | **4.0.0** | Exo + temperament. Constitution always on; ceremony by host. Repertoire organ on (vendored 0.2). Station card survives compact/host-swap. **On npm.** [vision](docs-site/docs/architecture/v4-vision.md) · [now](docs-site/docs/architecture/v4-now.md) |
 | **3.4.1** | Unified `install-bridges.cjs` on postinstall — OpenCode, Grok, Hermes, OpenClaw in one pass. All 7 MCPs servers via `npx -y 0xray mcp <cmd>` (no `dist/` paths). Canonical `release.mjs` pipeline. |
 | **3.3.1** | Orchestrator confidence gate wired into execution planning. |
@@ -102,9 +142,9 @@ Docs: [guides/autonomy-command](docs-site/docs/guides/autonomy-command.md) · Sk
 - **External Governance** — Dynamo Solar SSOT; CodexPolicyService; weighted PHI/TAU deliberation.
 - **Autonomous Engine** — thinDispatch 7-flow routing; orchestrator confidence gate (v3.3.1).
 
-## Consumer Install (postinstall)
+## Consumer Install (wear)
 
-On `npm install 0xray` in a consumer project, postinstall automatically:
+`npm install 0xray` links the vendored repertoire and prints `npx 0xray wear`. Wear then:
 
 1. Copies **`AGENTS-consumer.md` → `AGENTS.md`**. Does **not** write consumer-root **`SKILLS.md`**.
 2. Fastens **mill plant** (`mill` + `inspect`). Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not an xray catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump.
@@ -113,7 +153,7 @@ On `npm install 0xray` in a consumer project, postinstall automatically:
 5. Writes project **`.mcp.json`** with 7 MCPs servers (`npx -y 0xray mcp …`)
 6. Installs **4 chat bridges**: OpenCode, Grok, Hermes, OpenClaw, plus **Cursor** `.cursor/hooks.json` (PPE + wiring; mill plant, not costume)
 7. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin` from groover-hangar) may coexist when worn. Extra shops: `foundry.json` `shopPlant`. Not costume.
-8. Installs git pre-commit hook (non-blocking if not a git repo)
+8. Inside a git checkout, fastens Cursor `.cursor/hooks.json` and the hook scripts, and keeps an unwear snapshot. Outside a git checkout, skips those hooks and prints one warning. `npx 0xray setup --git-hooks` is what installs git hooks.
 
 See [llms.txt](llms.txt) for the agent map. Catalog of 45 skills lives in [SKILLS.md](SKILLS.md) — that is the exo catalog, not default consumer wear.
 
@@ -186,13 +226,13 @@ Docs: [memory routing](docs-site/docs/guides/memory-routing.md) · [Repertoire](
 
 ## Integrations
 
-| Platform | Install | Postinstall behavior |
+| Platform | Install | What that command writes |
 |----------|---------|----------------------|
 | **OpenCode** | `npx 0xray opencode install` | Merges `opencode.json`, copies agent YML surfaces |
 | **Grok CLI / Build** | `npx 0xray grok install` | Project `.grok/plugins/0xray` (shared HOME does not clobber machine plugin), 7 MCPs servers |
 | **Hermes Agent** | `npx 0xray hermes install` | `~/.hermes/plugins/xray-hermes`, consumer root marker |
 | **OpenClaw** | `npx 0xray openclaw install` | `.xray/config/openclaw.json`, skill sync |
-| **Cursor** | postinstall (`installCursorBridge`) | Fastens `.cursor/hooks.json` + relative `.cursor/hooks/*.sh`. Rewrites leftover env-assignment one-liners. Not a fifth chat TUI. |
+| **Cursor** | `npx 0xray wear` inside a git checkout | Fastens `.cursor/hooks.json` + relative `.cursor/hooks/*.sh`. Rewrites leftover env-assignment one-liners. Not a fifth chat TUI. |
 
 ## Governance & Codex
 

package/dist/SKILLS.md

@@ -2,6 +2,8 @@
 
 **4.0** — a suit that survives the context window
 
+Confer votes. Burst runs the swarm.
+
 **45 skills** in this exo catalog. Default consumer plant is **`mill` + `inspect`**, not this dump. `npm install 0xray` does **not** sync 45 skills unless `foundry.json` `"costume": true`. Factory shop plant (`shop-extract`, `shop-witness`, `shop-pin`) coexists with mill plant when a hangar wears those shops. Extra shops: `foundry.json` `shopPlant`. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares — organs (looker, vibe, mixer) live in the mill, not this catalog. Nested mill `@0xray/foundry@0.1.12`. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+. Agent map: [llms.txt](llms.txt).
 
 xray ships 45 knowledge skills (`src/skills/<name>/SKILL.md`) as the **costume / self-plant catalog**. Lead-dev operating model lives in **`orchestrator`** skill + `multi_agent_orchestration.lead_dev_mode` in features.json. **Repertoire is preferred** for long-term judgment (vendored 0.2.9, dest = named laws). Station is the compact ticket, not a skill and not a keyword store. Skills load on demand via the **xray-skills** MCP server (`npx -y 0xray mcp skills`) or when you plant them. This file is the exo catalog — mill does **not** write it to the consumer root.

package/dist/cli/commands/openclaw-install.js

@@ -69,7 +69,7 @@ async function installForOpenClaw(options = {}) {
             /* session-boot is best-effort */
         }
         const packageRoot = path.resolve(__dirname, '..', '..', '..');
-        const hookInstalled = isolated ? null : wiring.installOpenClawHostWear(packageRoot);
+        const hookInstalled = isolated ? null : wiring.installOpenClawHostWear(packageRoot, targetDir);
         const cliBackend = isolated ? false : wiring.maybeWriteOpenClawCliBackend();
         frameworkLogger.log('openclaw-integration', 'cli-backend', 'info', { written: cliBackend });
         if (hookInstalled) {

package/dist/cli/index.js

@@ -116,6 +116,18 @@ program
     .action((args) => {
     runGoggles(args);
 });
+program
+    .command("confer")
+    .argument("<state>", "on or off")
+    .description("Turn confer on or off in .xray/features.json. A missing key stays off until this runs.")
+    .action((state) => {
+    try {
+        runNodeScript("confer-switch.cjs", [state]);
+    }
+    catch {
+        process.exit(1);
+    }
+});
 program
     .command("wear")
     .description("Wear the 0xray suit in this git checkout")

package/dist/enforcement/index.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Enforcement entry. The Hermes bridge loads ValidatorRegistry from this file.
+ */
+export { ValidatorRegistry, globalValidatorRegistry, } from "./validators/index.js";

package/dist/enforcement/index.js

@@ -0,0 +1,4 @@
+/**
+ * Enforcement entry. The Hermes bridge loads ValidatorRegistry from this file.
+ */
+export { ValidatorRegistry, globalValidatorRegistry, } from "./validators/index.js";

package/dist/enforcement/validators/code-quality-validators.js

@@ -322,13 +322,15 @@ export class ConsoleLogUsageValidator extends BaseValidator {
     severity = "error";
     async validate(context) {
         const { newCode } = context;
-        // Skip validation if no code to check
         if (!newCode) {
             return this.createSuccessResult("No code to validate for console.log usage");
         }
-        // Check for console.log usage
-        if (newCode.includes("await frameworkLogger.log('rule-enforcer', '-return-passed-false-message-console-log-', 'info', { message: ")) {
-            return this.createFailureResult("await frameworkLogger.log('rule-enforcer', '-', 'info', { message:  } }); detected - use frameworkLogger for production logs or remove for debugging");
+        const codeWithoutComments = newCode
+            .replace(/\/\/.*$/gm, "")
+            .replace(/\/\*[\s\S]*?\*\//g, "");
+        const consoleCall = /console\.(?:log|debug|info|warn|error|trace)\s*\(/;
+        if (consoleCall.test(codeWithoutComments)) {
+            return this.createFailureResult("console method detected — use frameworkLogger", ["Use frameworkLogger instead of console methods"]);
         }
         return this.createSuccessResult("Console log usage follows proper guidelines");
     }

package/dist/governance/llm-governance-provider.d.ts

@@ -1,4 +1,9 @@
-export type GovernanceRole = "code-review" | "security-audit" | "researcher";
+export type GovernanceRole = "code-review" | "security-audit" | "researcher" | "architect";
+export type GovernanceMiss = "not-configured" | "error" | "timeout" | "empty" | "unparseable";
+export interface GovernanceAttempt {
+    vote: GovernanceVote | null;
+    miss: GovernanceMiss | null;
+}
 export interface GovernanceVote {
     decision: "approve" | "reject" | "abstain";
     confidence: number;
@@ -7,6 +12,7 @@ export interface GovernanceVote {
 export declare function resolveHermesBin(): string;
 export declare function isGovernanceLlmConfigured(): boolean;
 export declare function hermesCliAvailable(): boolean;
+export declare function attemptLLMGovernance(role: GovernanceRole, proposalTitle: string, proposalDescription: string, evidence: string[], proposalType: string): Promise<GovernanceAttempt>;
 export declare function tryLLMGovernance(role: GovernanceRole, proposalTitle: string, proposalDescription: string, evidence: string[], proposalType: string): Promise<GovernanceVote | null>;
 export declare function checkHermesOAuthStatus(): {
     configured: boolean;

package/dist/governance/llm-governance-provider.js

@@ -41,6 +41,19 @@ Respond with a structured vote in exactly this format:
 DECISION: approve|reject|abstain
 CONFIDENCE: <0.0-1.0>
 REASONING: <2-4 sentence analysis of the proposal's broader project impact>`,
+    architect: `You are a senior architect on a governance committee for a software project. Analyze the following proposal and architecture assessment.
+
+Consider:
+- Does the change fit the existing architecture?
+- Does it raise coupling, complexity, or scaling risk?
+- Should the work stop until a structural problem is fixed?
+
+Respond with a structured vote in exactly this format:
+DECISION: approve|reject|abstain
+CONFIDENCE: <0.0-1.0>
+REASONING: <2-4 sentence analysis>
+
+reject means the architecture should not proceed.`,
 };
 function resolveHermesProvider() {
     return process.env.HERMES_PROVIDER?.trim() || DEFAULT_HERMES_PROVIDER;
@@ -151,18 +164,43 @@ function runHermesGovernanceInference(prompt, config) {
         maxBuffer: 10 * 1024 * 1024,
     }).trim();
 }
+function sanitizeVoteReasoning(reasoning) {
+    return reasoning
+        .split("\n")
+        .map((line) => /^\s*(?:[-*•]\s*)?(?:Verdict:|DECISION:)/i.test(line) ? `> ${line.trim()}` : line)
+        .join("\n")
+        .trim();
+}
 function parseVote(text) {
-    const decisionMatch = text.match(/DECISION:\s*(approve|reject|abstain)/i);
-    const confidenceMatch = text.match(/CONFIDENCE:\s*([0-9.]+)/i);
-    const reasoningMatch = text.match(/REASONING:\s*(.+)/is);
-    if (!decisionMatch || !decisionMatch[1])
+    // First exact token before REASONING. The prompt menu and anything the model
+    // writes inside the reasoning body are not a second vote.
+    const lines = text.split("\n");
+    const reasoningIdx = lines.findIndex((line) => /^REASONING:/i.test(line.trim()));
+    const headerLines = reasoningIdx < 0 ? lines : lines.slice(0, reasoningIdx);
+    let decisionWord;
+    for (const line of headerLines) {
+        const match = line.trim().match(/^DECISION:\s*(approve|reject|abstain)\s*$/i);
+        if (match?.[1]) {
+            decisionWord = match[1];
+            break;
+        }
+    }
+    if (!decisionWord)
         return null;
+    const header = headerLines.join("\n");
+    const confidenceMatch = header.match(/CONFIDENCE:\s*([0-9.]+)/i);
     const rawConfidence = confidenceMatch?.[1];
     const confidence = rawConfidence ? parseFloat(rawConfidence) : 0.5;
+    const reasoningBody = reasoningIdx < 0
+        ? ""
+        : lines
+            .slice(reasoningIdx)
+            .join("\n")
+            .replace(/^REASONING:\s*/i, "");
     return {
-        decision: decisionMatch[1].toLowerCase(),
-        confidence: isNaN(confidence) ? 0.5 : Math.min(1, Math.max(0, confidence)),
-        reasoning: reasoningMatch?.[1]?.trim() || "No reasoning provided",
+        decision: decisionWord.toLowerCase(),
+        confidence: Number.isNaN(confidence) ? 0.5 : Math.min(1, Math.max(0, confidence)),
+        reasoning: sanitizeVoteReasoning(reasoningBody) || "No reasoning provided",
     };
 }
 async function callDirectLlm(role, config, proposalTitle, proposalDescription, evidence, proposalType) {
@@ -209,11 +247,28 @@ Please provide your structured vote.`;
     const message = choices?.[0]?.message;
     return message?.content ?? null;
 }
-export async function tryLLMGovernance(role, proposalTitle, proposalDescription, evidence, proposalType) {
+function missFromThrown(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const code = typeof error === "object" && error !== null && "code" in error
+        ? String(error.code ?? "")
+        : "";
+    const killed = typeof error === "object" &&
+        error !== null &&
+        "killed" in error &&
+        error.killed === true;
+    if (code === "ETIMEDOUT" || killed || /ETIMEDOUT|timed out/i.test(message)) {
+        return "timeout";
+    }
+    if (/invalid_grant|not configured|unauthorized|no credentials|authentication/i.test(message)) {
+        return "not-configured";
+    }
+    return "error";
+}
+export async function attemptLLMGovernance(role, proposalTitle, proposalDescription, evidence, proposalType) {
     const config = getConfig();
     if (!config) {
         process.stderr.write(`[llm] no config for role=${role}\n`);
-        return null;
+        return { vote: null, miss: "not-configured" };
     }
     if (config.mode === "hermes") {
         process.stderr.write(`[llm] using hermes -z provider=${config.provider} model=${config.model}\n`);
@@ -230,12 +285,12 @@ export async function tryLLMGovernance(role, proposalTitle, proposalDescription,
         const content = config.mode === "hermes"
             ? runHermesGovernanceInference(buildGovernancePrompt(role, proposalTitle, proposalDescription, evidence, proposalType), config)
             : await callDirectLlm(role, config, proposalTitle, proposalDescription, evidence, proposalType);
-        if (!content) {
+        if (!content?.trim()) {
             frameworkLogger.log("llm-governance", "parse", "warning", {
                 issue: "missing content in response",
                 role,
             });
-            return null;
+            return { vote: null, miss: "empty" };
         }
         const vote = parseVote(content);
         if (!vote) {
@@ -244,23 +299,26 @@ export async function tryLLMGovernance(role, proposalTitle, proposalDescription,
                 snippet: content.slice(0, 200),
                 role,
             });
-            return null;
+            return { vote: null, miss: "unparseable" };
         }
         frameworkLogger.log("llm-governance", "vote", "success", {
             role,
             decision: vote.decision,
             confidence: vote.confidence,
         });
-        return vote;
+        return { vote, miss: null };
     }
     catch (error) {
         frameworkLogger.log("llm-governance", "error", "error", {
             error: String(error),
             role,
         });
-        return null;
+        return { vote: null, miss: missFromThrown(error) };
     }
 }
+export async function tryLLMGovernance(role, proposalTitle, proposalDescription, evidence, proposalType) {
+    return (await attemptLLMGovernance(role, proposalTitle, proposalDescription, evidence, proposalType)).vote;
+}
 export function checkHermesOAuthStatus() {
     const direct = getDirectLlmConfig();
     if (direct) {